Lucene search
+L

399 matches found

RedhatCVE
RedhatCVE
added 2026/01/20 6:19 p.m.15 views

CVE-2025-52659

HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or information disclosure...

7.5CVSS5.4AI score0.00165EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/20 6:19 p.m.12 views

CVE-2025-52661

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised...

5.3CVSS5.4AI score0.0016EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/20 6:18 p.m.12 views

CVE-2025-55251

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS5.9AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/20 6:18 p.m.10 views

CVE-2025-55249

HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may weaken the application’s overall security posture and increase its susceptibility to common web-based attacks...

5.3CVSS5.4AI score0.00179EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/20 6:18 p.m.10 views

CVE-2025-55252

HCL AION version 2 is affected by a Weak Password Policy vulnerability. This can allow the use of easily guessable passwords, potentially resulting in unauthorized access...

9.8CVSS5.4AI score0.00158EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/19 7:16 p.m.7 views

CVE-2025-55252

HCL AION version 2 is affected by a Weak Password Policy vulnerability. This can allow the use of easily guessable passwords, potentially resulting in unauthorized access...

9.8CVSS5.8AI score0.00158EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/19 7:16 p.m.13 views

CVE-2025-55250

HCL AION version 2 is affected by a Technical Error Disclosure vulnerability. This can expose sensitive technical details, potentially resulting in information disclosure or aiding further attacks...

5.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/19 7:16 p.m.25 views

CVE-2025-55252

HCL AION version 2 is affected by a Weak Password Policy vulnerability. This can allow the use of easily guessable passwords, potentially resulting in unauthorized access...

9.8CVSS0.00158EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/19 7:16 p.m.21 views

CVE-2025-55250

HCL AION version 2 is affected by a Technical Error Disclosure vulnerability. This can expose sensitive technical details, potentially resulting in information disclosure or aiding further attacks...

5.3CVSS0.0014EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/19 6:16 p.m.11 views

CVE-2025-55251

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS6.1AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/19 6:16 p.m.12 views

CVE-2025-55249

HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may weaken the application’s overall security posture and increase its susceptibility to common web-based attacks...

5.3CVSS0.00179EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/19 6:16 p.m.13 views

CVE-2025-55251

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS0.00188EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/19 6:16 p.m.10 views

CVE-2025-55249

HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may weaken the application’s overall security posture and increase its susceptibility to common web-based attacks...

5.3CVSS5.8AI score0.00179EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/19 6:16 p.m.19 views

CVE-2025-52659

HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or information disclosure...

7.5CVSS0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/19 6:16 p.m.11 views

CVE-2025-52660

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/19 6:16 p.m.21 views

CVE-2025-52661

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised...

5.3CVSS0.0016EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/19 6:16 p.m.10 views

CVE-2025-52661

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised...

5.3CVSS5.8AI score0.0016EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/19 6:16 p.m.14 views

CVE-2025-52660

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS6.2AI score0.00298EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/19 6:13 p.m.48 views

CVE-2025-55252

CVE-2025-55252 – HCL AION version 2 is affected by a Weak Password Policy vulnerability, which can allow use of easily guessable passwords and potentially unauthorized access. The available documents identify the affected product (HCL AION 2) and the underlying issue (weak password policy), but d...

9.8CVSS5.4AI score0.00158EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/19 6:13 p.m.6 views

CVE-2025-55252

HCL AION version 2 is affected by a Weak Password Policy vulnerability. This can allow the use of easily guessable passwords, potentially resulting in unauthorized access...

9.8CVSS5.3AI score0.00158EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder